{"uuid": "42e9081c-e9e7-4a5e-90bf-28a44b0a27fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78006", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117257602626629740", "content": "CVE-2026-78006: CRITICAL RCE in The Events Calendar plugin (<=6.17.4) for WordPress. Unauthenticated attackers can exploit comments to run code on the server. Disable event comments now & check for patches. https://radar.offseq.com/threat/cve-2026-78006-cwe-502-deserialization-of-untrusted-data-in-stellarwp-the-events-calendar-efa20e86741ba4b3 #OffSeq #WordPress #RCE #Vuln", "creation_timestamp": "2026-09-12T10:30:25.168007Z"}